Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e2039333034.roa
File:                     34352e34322e34362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          pI3PrpIFjx/9sIPlQHQzTzSCysF6ELh93H8LgR+gMck=
Subject key identifier:   AC:A0:C9:A9:9B:44:24:37:CE:CA:E9:05:2E:4E:6C:95:1D:7F:0B:20
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       78F7A628D59B39B4D047BDFBE52F47E5144389D5
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 18 Aug 2025 16:06:58 +0000
ROA not before:           Mon 18 Aug 2025 16:01:58 +0000
ROA not after:            Mon 17 Aug 2026 16:06:58 +0000
asID:                     9304
IP address blocks:        45.42.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:a6:28:d5:9b:39:b4:d0:47:bd:fb:e5:2f:47:e5:14:43:89:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Aug 18 16:01:58 2025 GMT
            Not After : Aug 17 16:06:58 2026 GMT
        Subject: CN=ACA0C9A99B442437CECAE9052E4E6C951D7F0B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:c4:45:b8:b8:86:d2:f9:e7:17:e9:97:41:
                    b3:01:03:c5:0b:09:64:3b:22:56:8e:e7:c0:52:96:
                    a9:74:5d:11:41:9c:54:e8:28:71:60:0a:34:04:bf:
                    1a:e1:73:68:6e:09:0b:6d:80:48:19:8d:c2:ab:52:
                    31:9f:6f:60:b2:52:2a:b5:13:99:cc:bf:bd:86:8c:
                    e6:8d:0c:32:a1:ef:db:f8:c9:b4:be:ad:ad:40:38:
                    6f:1f:39:48:0e:81:6e:18:4a:dc:4c:e6:6f:06:1a:
                    75:39:5e:9a:42:c0:4e:b1:cc:54:f6:00:5a:ae:51:
                    70:2e:e7:63:8b:76:bd:b2:40:69:02:c1:b9:9a:f5:
                    93:bb:a2:ed:25:41:73:f4:66:a4:76:ff:92:1e:5f:
                    63:5c:98:bd:bd:69:d5:d7:6f:95:86:59:e4:8d:e2:
                    cd:38:b8:da:aa:c8:00:80:b5:a7:37:f0:f9:b0:79:
                    07:6d:da:d5:8f:8d:76:63:55:28:1a:f0:b1:54:99:
                    0e:c0:4c:93:a5:14:49:4c:f4:e0:6e:58:30:23:bf:
                    2b:b4:8b:7e:2e:5c:9c:69:a8:1a:c0:93:71:57:d4:
                    eb:20:2e:6c:ac:d8:27:81:47:7d:c4:63:b3:d1:2d:
                    58:78:80:e1:d9:52:c3:66:25:23:3f:8d:e8:9d:ca:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:C9:A9:9B:44:24:37:CE:CA:E9:05:2E:4E:6C:95:1D:7F:0B:20
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:ae:e9:9a:34:b2:35:46:e1:0e:d2:64:3e:fa:a9:ea:ed:
         06:6b:53:3e:14:5f:28:34:20:0b:2b:35:64:e3:95:5c:83:48:
         0c:78:e6:99:e3:47:5e:28:4b:32:57:20:e4:64:ca:2d:c4:0d:
         78:32:e9:49:09:61:fb:42:32:f2:79:f4:9b:09:2f:58:ba:6a:
         2f:5a:d8:13:62:70:93:53:ed:fc:4b:f2:1d:0e:c9:34:e7:d0:
         48:a7:e7:15:57:e6:d0:27:68:30:09:f0:9e:7b:b3:2a:c3:f7:
         c3:b4:37:27:38:f1:67:d8:f6:5b:e3:34:6b:68:7b:c0:65:8c:
         dc:8d:aa:0d:1e:08:bd:f0:4c:94:58:e6:26:1d:bc:cd:57:6c:
         66:f8:af:93:37:2d:8d:9e:55:c3:dd:71:8b:cf:72:0e:b9:78:
         0f:b1:df:8c:dc:95:9c:b9:66:e5:73:5e:4a:29:3c:fe:4b:81:
         c5:c3:31:f9:f3:c7:71:d4:1c:90:b3:bf:b5:de:c4:1e:d1:4f:
         e9:cf:1c:b0:4b:24:c9:41:b7:0d:b6:75:03:74:6e:a9:86:ff:
         7f:20:5a:ec:1c:9f:7b:26:f8:e1:b9:58:49:f1:2d:f7:4e:36:
         19:a1:ae:8c:bf:fb:30:2b:62:5c:81:59:8c:62:23:92:32:a6:
         7f:4b:30:eb
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUePemKNWbObTQR7375S9H5RRDidUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjUwODE4MTYwMTU4WhcNMjYwODE3MTYwNjU4
WjAzMTEwLwYDVQQDEyhBQ0EwQzlBOTlCNDQyNDM3Q0VDQUU5MDUyRTRFNkM5NTFE
N0YwQjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1nERbi4htL5
5xfpl0GzAQPFCwlkOyJWjufAUpapdF0RQZxU6ChxYAo0BL8a4XNobgkLbYBIGY3C
q1Ixn29gslIqtROZzL+9hozmjQwyoe/b+Mm0vq2tQDhvHzlIDoFuGErcTOZvBhp1
OV6aQsBOscxU9gBarlFwLudji3a9skBpAsG5mvWTu6LtJUFz9Gakdv+SHl9jXJi9
vWnV12+VhlnkjeLNOLjaqsgAgLWnN/D5sHkHbdrVj412Y1UoGvCxVJkOwEyTpRRJ
TPTgblgwI78rtIt+LlycaagawJNxV9TrIC5srNgngUd9xGOz0S1YeIDh2VLDZiUj
P43oncpswwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKygyambRCQ3zsrpBS5ObJUd
fwsgMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSouMA0GCSqGSIb3DQEBCwUAA4IBAQBK
F67pmjSyNUbhDtJkPvqp6u0Ga1M+FF8oNCALKzVk45Vcg0gMeOaZ40deKEsyVyDk
ZMotxA14MulJCWH7QjLyefSbCS9YumovWtgTYnCTU+38S/IdDsk059BIp+cVV+bQ
J2gwCfCee7Mqw/fDtDcnOPFn2PZb4zRraHvAZYzcjaoNHgi98EyUWOYmHbzNV2xm
+K+TNy2NnlXD3XGLz3IOuXgPsd+M3JWcuWblc15KKTz+S4HFwzH588dx1ByQs7+1
3sQe0U/pzxywSyTJQbcNtnUDdG6phv9/IFrsHJ97JvjhuVhJ8S33TjYZoa6Mv/sw
K2JcgVmMYiOSMqZ/SzDr
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:44 2025 by rpki-client